5.2 Microsoft 365 Apps, Office Policies, ODT, OCT, and Admin Center
Key Takeaways
- The Microsoft 365 Apps app type in Intune is the standard deployment path for Office apps on managed Windows devices.
- The configuration designer and XML options control included apps, architecture, languages, update channel, MSI removal, shared computer activation, and license agreement behavior.
- Use shared computer activation for labs, shift-worker PCs, pooled virtual desktops, and other multi-user Windows devices.
- The Office Deployment Tool is command-line based; the Office Customization Tool creates configuration XML for large Office deployments.
- Cloud Policy service applies Office policy settings to signed-in users even when the device is not domain joined or otherwise managed.
Deploying Microsoft 365 Apps with Intune
For managed Windows endpoints, Intune includes a dedicated Microsoft 365 Apps app type. Use it when the requirement is to install the Office suite, select apps such as Word, Excel, PowerPoint, Outlook, Teams, OneDrive, Project, or Visio, and configure Office-specific deployment settings without building a generic Win32 package.
The app suite can be configured with the Intune configuration designer or by entering XML data. The designer is usually enough for standard deployments. XML is useful when you need precise Office Deployment Tool settings, when you use Microsoft 365 Apps for business configuration requirements, or when an organization already manages Office deployment XML as a controlled artifact.
| Requirement | Setting or tool to remember |
|---|---|
| Exclude Access or Publisher | Select included Office apps in Intune or use ODT/OCT XML with excluded apps |
| Choose monthly or current feature cadence | Update Channel in the app suite, ODT XML, or Microsoft 365 Apps admin center controls |
| Shared classroom, lab, pooled VDI, or shift PC | Enable shared computer activation |
| Remove older MSI Office before Click-to-Run install | Remove other versions / MSI removal setting |
| Deploy extra proofing or display languages | Languages in the suite configuration or XML |
| Standardize Office policy settings by user | Cloud Policy service in Microsoft 365 Apps admin center or Intune Apps > Policy > Policies for Office apps |
ODT and OCT
The Office Deployment Tool (ODT) is a command-line tool. It uses setup.exe and a configuration XML file to download, install, update, remove, or customize Microsoft 365 Apps. It gives detailed control over products, languages, update behavior, source path, display behavior, and install options.
The Office Customization Tool (OCT) is the web interface that creates the Office configuration XML. It is the safer choice for many admins because it reduces XML syntax mistakes and can save deployment configurations in the Microsoft 365 Apps admin center. OCT can define products, releases, architecture, languages, apps and features, update source, MSI removal, activation method, and application preferences.
ODT and OCT matter on MD-102 because the study guide explicitly includes deploying Microsoft 365 Apps as part of Windows Autopilot by using ODT or OCT. If the question says the deployment must be tracked during ESP, consider whether an Office Win32 package is a better fit than the built-in Microsoft 365 Apps type.
Office policies and admin center management
Do not confuse Office app deployment with Office app policy. Deployment installs the software. Policy controls behavior after users run the apps.
The Cloud Policy service for Microsoft 365 enforces policy settings for Microsoft 365 Apps for enterprise on a user's device when the user signs in. That device does not have to be domain joined or otherwise managed. Commercial and US Government customers can access this through the Microsoft 365 Apps admin center at config.office.com or through Intune under Apps > Policy > Policies for Office apps.
The Microsoft 365 Apps admin center also supports inventory, servicing, update channel management, and cloud update. Cloud update is Microsoft's modern approach for servicing Microsoft 365 Apps on supported channels, especially Current Channel and Monthly Enterprise Channel. It can help with rollout waves, pause, rollback, exclusion windows, and update health monitoring.
Exam decision pattern
When the scenario is about installing Office on managed Windows devices, choose the Microsoft 365 Apps app type unless there is a specific Autopilot ESP tracking or custom packaging reason to use Win32. When the scenario is about building a reusable XML file, choose OCT. When the scenario is about running the XML to download or install Office, choose ODT. When the scenario is about Office settings following a user across devices, choose Cloud Policy.
A school has shared lab computers used by many licensed users. Which Microsoft 365 Apps setting should be enabled?
An administrator needs a web-based tool to create a reusable XML file that defines Office apps, languages, update channel, and activation behavior. Which tool should they use?
You need Office policy settings to follow users who sign in to Microsoft 365 Apps on devices that are not domain joined. Which management option is designed for this?